Pin GitHub Actions to SHA + Dependabot (#62)

* feat(repo): Add dependabot

* fix(ci): clean up

* fix(gh-actions): pin to sha

* fix(lint): fixing yaml lint

* feat(repo): Add dependabot

* fix(vagrant): up retry count to 60 because gh actions are sloooooow

.github/workflows/lint.yml

@@ -13,10 +13,10 @@ jobs:
 
     steps:
       - name: Check out the codebase
-        uses: actions/checkout@v3
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # 3.0.2
 
       - name: Set up Python 3.x
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@b55428b1882923874294fa556849718a1d7f2ca5 #4.0.2
         with:
           python-version: '3.x'
 

.github/workflows/test.yml

@@ -1,6 +1,6 @@
 ---
 name: Test
-"on":
+on:
   pull_request:
   push:
     branches:
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Check out the codebase
-        uses: actions/checkout@v2
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # 3.0.2
 
       - name: Install Ansible
         run: brew install ansible
@@ -31,7 +31,7 @@ jobs:
           echo "* 192.168.30.0/24" | sudo tee -a /etc/vbox/networks.conf > /dev/null
 
       - name: Cache Vagrant boxes
-        uses: actions/cache@v3
+        uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # 3.0.8
         with:
           path: |
             ~/.vagrant.d/boxes